Re: [xml-dev] Cross-domain loading of XML

[Rob Koberg <rob@koberg.com>]

Here is where it started:

http://bob.pythonmac.org/archives/2005/12/05/remote-json-jsonp/

Think about it like you are loading a javascript file using the script element.

You can also handle errors like 404s using, for example, jQuery.ajax:

http://api.jquery.com/jQuery.ajax/

This is obviously more dangerous than loading an XML Document (other
than maybe the size of the XML), so the restriction makes no sense.

Further, when they say cross domain, it is more than that. Given this base URL:

http://www.example.org/

This is a valid request: http://www.example.org/resource.xml

These are not:
https://www.example.org/resource.xml
http://www.example.org:8080/resource.xml
http://app.example.org/resource.xml

best,
-Rob

On Wed, Dec 8, 2010 at 5:08 AM, Elliotte Rusty Harold
<elharo@ibiblio.org> wrote:
> On Tue, Dec 7, 2010 at 7:15 PM, Rob Koberg <rob@koberg.com> wrote:
>
>> First thing: Get the browser builders to allow cross domain loading of
>> XML. Without that you might as just bang your head on a post. (even
>> with that, you will just be banging your head on a padded post)
>
> Just want to double check this. JSON can be loaded cross-domain and
> XML can't, right? I.e. I can eval JSON from an arbitrary host in my
> browser-based JavaScript and I can't load XML using XmlHTTPRequest
> unless it comes from the same host? Or is it more subtle than that? If
> so, is there a detailed analysis somewhere of exactly under what
> conditions I can load JSON from where and how?
>
> Googling around I see some blog posts, but no detailed analysis.
>
> --
> Elliotte Rusty Harold
> elharo@ibiblio.org
>
> _______________________________________________________________________
>
> XML-DEV is a publicly archived, unmoderated list hosted by OASIS
> to support XML implementation and development. To minimize
> spam in the archives, you must subscribe before posting.
>
> [Un]Subscribe/change address: http://www.oasis-open.org/mlmanage/
> Or unsubscribe: xml-dev-unsubscribe@lists.xml.org
> subscribe: xml-dev-subscribe@lists.xml.org
> List archive: http://lists.xml.org/archives/xml-dev/
> List Guidelines: http://www.oasis-open.org/maillists/guidelines.php
>
>